k1p2y3 Goto Github PK

iot-vulhub

IoT固件漏洞复现环境

java-rce-echo

Java RCE 回显测试代码

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

k1p2y3

k1p2y3.github.io

lib_mysqludf_sys

A UDF library with functions to interact with the operating system. These functions allow you to interact with the execution environment in which MySQL runs.

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

lockphish

Lockphish is a tool for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode[No longer works on latest devices]

lstar

LSTAR - CobaltStrike 综合后渗透插件

magic-python

Python 黑魔法手册

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

mobile-security-framework-mobsf

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing.

ms17-010-python

MS17-010: Python and Meterpreter

multiplexing_port_socks5

一款golang写的支持http与socks5的端口复用小工具，并且可以开启socks5代理。

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

net-obfuscate

Obfuscate ECMA CIL (.NET IL) assemblies to evade Windows Defender AMSI

nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

ntml-hash-calculator

NTLM hash 加密器🔒

p4wnp1

P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phantom-evasion

Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)

php_include_to_shell_char_dict

play_with_llvm

A book about LLVM & Clang（中文开源书：玩转 LLVM）

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

pyattck

A Python Module to interact with the Mitre ATT&CK Framework

pysec

🐍 The Offensive Python

qqgroup-visualization

QQ群关系可视化查询3D力导向图

rabr

Redis-Attack By Replication (通过主从复制攻击Redis)

redis-rogue-server

Redis(<=5.0.5) RCE

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.